Behavioral task
behavioral1
Sample
becebb6a9e84b7b92195215ee141efee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
becebb6a9e84b7b92195215ee141efee.exe
Resource
win10v2004-20240226-en
General
-
Target
becebb6a9e84b7b92195215ee141efee
-
Size
3.9MB
-
MD5
becebb6a9e84b7b92195215ee141efee
-
SHA1
dbeaf6a088992806a85dfd0959152b5f77e311cb
-
SHA256
4fb4e6ea103dc3ebaca57f7ee0df1b2e38c5fdf086f10b52a8d7609675c49ae2
-
SHA512
10d053b4c792d8b470bdcb2c3f7b4819f5d30e6106cdd55b3d75685c1b008358da15a7212bb5faa1fef0a6dfd09f96580dd24353d9f1c2dc9eeb6f09308fe2a6
-
SSDEEP
98304:ovhxkQ/VNEmL1OEcakcibiqhMbMgOn7n0bcakcibiqhNRza4ZQGWQcakcibiqhM:opxR/VNEkOEdlirybMgOnkdlirdH9WQI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource becebb6a9e84b7b92195215ee141efee
Files
-
becebb6a9e84b7b92195215ee141efee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE